Tidy
Vendor:
First CVE: Aug 11, 2015 · Active for 10 years
6
Total CVEs
More Total CVEs than 83% of tracked products
1.5
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 43% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Tidy over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 11, 2015
10 years ago
Most Recent CVE
Jun 23, 2025
400 days ago
CVE Severity & Scoring
Tidy6 CVEs
50%
33%
17%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (16.7%)
Network3 (50.0%)
Unknown2 (33.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (66.7%)
High0 (0.0%)
Unknown2 (33.3%)
User Interaction
None4 (66.7%)
Unknown2 (33.3%)
Required0 (0.0%)
Privileges Required
Low1 (16.7%)
High0 (0.0%)
None3 (50.0%)
Unknown2 (33.3%)
Top CVEs
Signals from CVEs in this product scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-33391CRITICAL An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c. | Feb 17, 2023 | 9.8 | 30 | NO | NO |
CVE-2017-13692HIGH In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument. | Aug 25, 2017 | 7.5 | 25 | NO | NO |
CVE-2017-17497HIGH In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children | Dec 10, 2017 | 7.5 | 24 | NO | NO |
CVE-2015-5522MEDIUM Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command | Aug 11, 2015 | 6.8 | 19 | NO | NO |
CVE-2025-6498MEDIUM A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/alloc.c. The manipulation leads to memory | Jun 23, 2025 | 5.5 | 17 | NO | NO |
CVE-2015-5523MEDIUM The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an | Aug 11, 2015 | 4.3 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (6 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (6 CVEs).
Media Mentions
Signals from CVEs in this product scope (6 CVEs).
Top CNAs Publishing CVEs For Tidy
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.8.0 | 1 | 5.5 | 0.2% | 0 | 0 |
| 5.7.28 | 1 | 9.8 | 1.1% | 0 | 0 |
| 5.7.0 | 1 | 7.5 | 1.4% | 0 | 0 |
| 5.5.31 | 1 | 7.5 | 1.1% | 0 | 0 |